Changed X-XSS-Protection value to recommended 0,

johanbriger · johanbriger · commit a09881ebe5b4 · 2026-02-18T16:23:15.000+01:00
diff --git a/src/main/java/org/juv25d/filter/SecurityHeadersFilter.java b/src/main/java/org/juv25d/filter/SecurityHeadersFilter.java
@@ -17,7 +17,7 @@ public void doFilter(HttpRequest req, HttpResponse res, FilterChain chain) throw
 
             res.setHeader("X-Content-Type-Options", "nosniff");
             res.setHeader("X-Frame-Options", "DENY");
-            res.setHeader("X-XSS-Protection", "1; mode=block");
+            res.setHeader("X-XSS-Protection", "0");
             res.setHeader("Referrer-Policy", "no-referrer");
 
         }

Original file line number	Diff line number	Diff line change
`@@ -17,7 +17,7 @@ public void doFilter(HttpRequest req, HttpResponse res, FilterChain chain) throw`
`17`	`17`
`18`	`18`	`res.setHeader("X-Content-Type-Options", "nosniff");`
`19`	`19`	`res.setHeader("X-Frame-Options", "DENY");`
`20`		`- res.setHeader("X-XSS-Protection", "1; mode=block");`
	`20`	`+ res.setHeader("X-XSS-Protection", "0");`
`21`	`21`	`res.setHeader("Referrer-Policy", "no-referrer");`
`22`	`22`
`23`	`23`	`}`